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EXAMINERS AMENDMENT 

1 . An examiner's amendment to the record appears below. Should the changes 
and /or additions by unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1.312. To ensure consideration of such amendment, it must be submitted 
no later than the payment of the issue fee. 

2. Authorization for this examiner's amendment was given in a telephone interview 
with Sanro Zlobec (Reg. No. 52,535) on 12/2/2010. 

3. The application has been amended as follows: 
The following claims have been amended as follow:. 

35. (Currently Amended) An authentication system, comprising: 

an access controller op e rab le to for commun i cat e communicating with a 
client via a first communication medium; and 

an authentication server op e rable to for commun i cat e communicating with 
said client and said access controller via a second communication medium and further 
op e rab le to for deliver- delivering a first key to said client and a second key to said 
access controller, said second key being complementary to said first key such that 
when said client and said access controller are connected, communications 
therebetween can be encrypted using said keys; and wherein said access controller is 
operable to selectively pass instructions received from said client to a computer 
attached to said access controller if a verification protocol utilizing said keys is met; 
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wherein said first key is delivered to said client only after said second key has been 
successfully delivered to said access controller. 

45. (Currently Amended) An access controller for intermediating communications 
between an interface and a computer comprising: and op e rab le to 

a memory for storo for storing a second key complementary to a first key; 
said access controller op e rab le to communicate for communicating with a client via said 
interface; said client oporab l o to storo for storing said first key and to receive 
instructions from a user; said access controller op e rab le to for selectively pass passing 
said instructions to said computer if a verification protocol utilizing said keys is met; 
wherein said verification protocol includes a generation of a random number by said 
client, an encryption of said random number by said client using said first key, a delivery 
of said random number and said encrypted random number from said client to said 
access controller, a decryption of said encrypted random number using said second key 
by said access controller, a comparison of said random number and Said decrypted 
number, and a decision to pass at least a portion of said instructions if said comparison 
finds a match of said random number with said decrypted number, and a decision not to 
pass said at least a portion of said instructions if no match is found; wherein said access 
controller is operable to obtain said second key from an authentication server and said 
client is operable to obtain said first key from said authentication server; wherein said 
first key is obtained by said client only after said second key has been successfully 
obtained by said access controller. 
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Claims 56-66 (Cancelled) 

67 (Currently Amended) A method of securing access between a client and a 
computer having an access controller intermediate said client and said computer, said 
method comprising: 

delivering a first key from an authentication server to said client: 

delivering a second key from said authentication server to said access 
controller, said second key complementary to said first key, wherein said first key 
is delivered to said client only after said second key has been successfully 
delivered to said access controller; 

receiving an instruction destined for said computer; 

generating a random number; 

encrypting said random number using said [[a]] first key; 

delivering said random number, said encrypted random number and said 
instruction to said access controller; 

decrypting said encrypted random number using said [[a]] second key, 
said second key complementary to said first key; 

comparing said random number and said decrypted number; 

passing at least a portion of said instruction to said computer if said 
comparison finds a match of said random number with said decrypted number; 
and, 
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discarding said at least a portion if no match is found. 
Claims 70-73 (Cancelled) 

Contact Information 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Shawki S Ismail whose telephone number is 571-272- 
3985. The examiner can normally be reached on M-F 8:30 - 5:00. 
If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Rupal Dharia can be reached on 571-272-3880. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 

Patent Application Information Retrieval (PAIR) system. Status information for 

published applications may be obtained from either Private PAIR or Public PAIR. 

Status information for unpublished applications is available through Private PAIR only. 

For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 

you have questions on access to the Private PAIR system, contact the Electronic 

Business Center (EBC) at 866-217-9197 (toll-free). 

/Shawki S Ismail/ 

Primary Examiner, Art Unit 2455 
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